Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2019-16959

Disclosure Date: December 21, 2020 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows CSV Injection, also known as Formula Injection, via a file attached to a ticket.
Attacker Value
Unknown

CVE-2019-16957

Disclosure Date: December 18, 2020 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows XSS via the First Name field of a User Account.
Attacker Value
Unknown

CVE-2019-16955

Disclosure Date: December 18, 2020 (last updated February 22, 2025)
SolarWinds Web Help Desk 12.7.0 allows XSS via an uploaded SVG document in a request.